Agent Security
Egress Filtering
Also: outbound allowlist, network egress control
Restricting which outside hosts and ports a machine, container or agent may connect to.
In more detail
Blocking outbound traffic by default and allowing only what the task needs makes exfiltration much harder, even when an agent has been tricked. A coding agent usually needs a package registry, a git host and a model API, not arbitrary hosts. Egress rules complement sandboxing and are most effective when logged, so blocked attempts become a detection signal.